openbsd/src/regress, branch tb_20221020A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=tb_202210202022-10-20T07:33:15+00:00This commit was manufactured by cvs2git to create tag 'tb_20221020'.2022-10-20T07:33:15+00:00cvs2svnadmin@example.com2022-10-20T07:33:15+00:00urn:sha1:963a7b06e7d578322df5c53439ac3f52eae54095Provide a harness driving rust-openssl's regress tests2022-10-20T07:33:14+00:00tb2022-10-20T07:33:14+00:00urn:sha1:6ef02c2707dc554983552781e5b767ae8103de15
rust-openssl is an integral part of the Rust ecosystem and more than a
dozen ports, including lang/rust itself, depend on it. We need to ensure
that it keeps working with LibreSSL.
If the rust and rust-openssl-tests packages are installed, create a cargo
workspace under obj/ that compiles and runs the rust-openssl regress tests
much like what is done for the openssl-ruby tests. This expands our regress
coverage: for instance, this would have caught the broken ASN.1 indefinite
length encoding caused by asn1/tasn_enc.c r1.25.
Positive feedback beck jsing semarie
Testing and ok anton
Remove references to four definitions that tb@ deleted in x509.h rev. 1.892022-10-18T14:55:19+00:00schwarze2022-10-18T14:55:19+00:00urn:sha1:3daa6137ebbb54877916ab760ed8716f17551850
on Jan 10, 2022: X509_EX_V_INIT X509_EX_V_NETSCAPE_HACK
X509_EXT_PACK_STRING X509_EXT_PACK_UNKNOWN.
Mark BN_set_params and BN_get_params as deprecated, unused,
and intentionally undocumented.
Revise expire callback regress to use chains with expired certificates.2022-10-17T18:44:36+00:00jsing2022-10-17T18:44:36+00:00urn:sha1:9ca85afd54f2ef26c0988e91d438dc81e8f88558
Rather than using X509_STORE_CTX_set_time() (which is resulting all
certificates in the chain being treated as expired), use chains that have
an expired leaf or expired intermediate. This triggers a different code
path, which is currently mishandled (and hence failing).
Also ensure that the resulting error and error depth match what we expect
them to be.
Ensure that verification results in the expected error and error depth.2022-10-17T18:36:52+00:00jsing2022-10-17T18:36:52+00:00urn:sha1:60872b04d07d9a54d9f973c16c8c2c9974d77672
Improve verification regress and ensure that the legacy or modern
verification completes with the expected error and error depth.
Handle corner case in which the test case can actually be a square2022-10-11T13:51:41+00:00tb2022-10-11T13:51:41+00:00urn:sha1:31d4a1b807b7956cfe128beb96dbc6a54a3d00e8Dynamically link libssl for QUIC regress.2022-10-02T16:40:56+00:00jsing2022-10-02T16:40:56+00:00urn:sha1:26867e2c9c386b2897b23f5fdf91039e7c6680b6
Now that the QUIC API is public, we can stop linking this statically.
Remove unused headers.2022-10-02T16:39:39+00:00jsing2022-10-02T16:39:39+00:00urn:sha1:888117cda0dc2c3432db6a033b48f140389c0a1bRevise for SSL_CTX_INTERNAL and SSL_INTERNAL removal.2022-10-02T16:38:23+00:00jsing2022-10-02T16:38:23+00:00urn:sha1:41318db5497cddfa4935c4ea48bcb2eb5786375eTweak symbols test in such a way that it would have caught the recent2022-09-21T15:24:45+00:00tb2022-09-21T15:24:45+00:00urn:sha1:a1ab11b512a48638b18c6decdb5824adc3a3a139
Symbols.list mistake: undefine aliases (except _cfb block ciphers which
are aliases for historical reasons). Use -Wl,--no-allow-shlib-undefined.